Changelog

Security fix: Markdown parsing vulnerability (PR #808)

Release Notes

Summary

This update addresses a security vulnerability in Markdown document
processing used by the security questionnaire service. Malformed Markdown
content could previously cause the service to crash when parsing
documents.

Changes

  • Upgraded the Markdown processing library to a patched version that
    fixes CVE-2025-69534.
  • Hardened document parsing so malformed Markdown input no longer
    causes an unhandled error and service interruption.
  • Applies to knowledge base indexing and document parsing workflows
    that process Markdown content.

Impact

Security/audit impact: Reduces risk of denial-of-service from
malformed Markdown content submitted to document processing workflows.
No customer action required.

Classification

Security